Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prozkoumání PC - trhá se po přeinstalování

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní: http://forum.viry.cz/viewtopic.php?f=12&t=123975 . Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
kvasak
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 28 úno 2013 22:17

Prozkoumání PC - trhá se po přeinstalování

#1 Příspěvek od kvasak »

Zdravím, mám problém počítač jsem před asi 3 dny přeinstaloval, bohužel začal se opět trhat (především videa na internetu + videa formátu .3gp, nebo když dělám ve wordu nějakou práci), Předtím jsem měl problém s průzkumníkem Windows, který jsem vyřešil, díky ostatním příspěvkům. Chtěl bych se zeptat jestli by mi ho někdo přes nějaké programy neprohlédnul. (znám jen HJthis a ten mi neukazuje žádný červený kříž) nechce se mi to zase přeinstalovávat.

Předem díky

Popř. přidávám log z HJthis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:14:31, on 3.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Owner\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-4179441697-2289912293-2522777708-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-4179441697-2289912293-2522777708-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\Windows\SysWOW64\AsusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7370 bytes

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prozkoumání PC - trhá se po přeinstalování

#2 Příspěvek od Rudy »

Zdravím!
Nainstaloval jste všechny ovladač hardwaru?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

kvasak
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 28 úno 2013 22:17

Re: Prozkoumání PC - trhá se po přeinstalování

#3 Příspěvek od kvasak »

Ano všechno komplet nainstalované,originál ze stránek prodejce. Ještě abych upřesnil vlastním netbook ,,Asus EEE 1215N"

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prozkoumání PC - trhá se po přeinstalování

#4 Příspěvek od Rudy »

Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

kvasak
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 28 úno 2013 22:17

Re: Prozkoumání PC - trhá se po přeinstalování

#5 Příspěvek od kvasak »

Omlouvám se, že to trvalo, práce nepočká.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Owner at 2013-03-08 00:23:10
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 162 GB (68%) free of 238 GB
Total RAM: 4086 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:23:16, on 8.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Owner.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-4179441697-2289912293-2522777708-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-4179441697-2289912293-2522777708-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\Windows\SysWOW64\AsusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8747 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\WLANExt.exe 30043280
\??\C:\Windows\system32\conhost.exe "12641788241348172439-1564875368-2398547101742074771-21605650515515889501082540729
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\SysWOW64\AsusService.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
WLIDSvcM.exe 1588
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"taskhost.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1424.0.917926418\2014869340" --supports-dual-gpus=false --gpu-vendor-id=0x8086 --gpu-device-id=0xa001 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.14.10.2230 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1424.4.730319702\1159890049" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="1424.7.806297513\2096787540" /prefetch:3
"C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="1424.36.216085506\46182777" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="1424.38.1346014824\922183503" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="1424.45.407264938\274406249" /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe66_ Global\UsGthrCtrlFltPipeMssGthrPipe66 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="1424.47.162301444\165162827" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="1424.48.1435873686\1478638127" /prefetch:3
"C:\Users\Owner\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-30 11447912]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-30 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-30 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-30 364056]
"KONICA MINOLTA PagePro 1350WStatusDisplay"=C:\Windows\system32\MSTM64_Q.EXE [2011-03-25 247736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2013-02-25 1602984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-18 946352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-30 261120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-03-08 00:23:11 ----D---- C:\Program Files\trend micro
2013-03-08 00:23:10 ----D---- C:\rsit
2013-03-07 15:56:06 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-03-07 15:56:06 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-03-07 15:56:04 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-03-07 15:56:04 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-03-07 15:56:02 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-03-07 15:56:02 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-03-07 15:56:01 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-03-07 15:56:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-03-07 15:56:01 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-03-07 15:56:01 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-03-07 15:56:01 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-03-07 15:56:00 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-03-07 15:56:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-03-07 15:56:00 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-03-07 15:56:00 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-03-07 15:55:59 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-03-07 15:55:59 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-03-07 15:55:59 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-03-07 15:55:59 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-03-07 15:55:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-03-07 15:55:58 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-03-07 15:55:57 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-03-07 15:55:57 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-03-07 15:55:56 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-03-07 15:55:56 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-03-07 15:55:54 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-03-07 15:55:54 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-03-07 15:55:52 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-03-07 15:55:52 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-03-07 15:55:52 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-03-07 15:55:52 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-03-07 15:55:51 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-03-07 15:55:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-03-07 15:55:51 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-03-07 15:55:51 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-03-07 15:55:51 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-03-07 15:55:51 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-03-07 15:55:50 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-03-07 15:55:50 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-03-07 15:55:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-03-07 15:55:50 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-03-07 15:55:50 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-03-07 15:55:50 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-03-07 15:55:49 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-03-07 15:55:49 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-03-07 15:55:46 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-03-07 15:55:46 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-03-07 15:55:46 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-03-07 15:55:46 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-03-07 15:55:46 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-03-07 15:55:46 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-03-07 15:55:45 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-03-07 15:55:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-03-07 15:55:45 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-03-07 15:55:45 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-03-07 15:55:44 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-03-07 15:55:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-03-07 15:55:44 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-03-07 15:55:44 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-03-07 15:55:44 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-03-07 15:55:44 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-03-07 15:55:43 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-03-07 15:55:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-03-07 15:55:43 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-03-07 15:55:43 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-03-07 15:55:42 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-03-07 15:55:41 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-03-07 15:55:41 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-03-07 15:55:41 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-03-07 15:55:41 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-03-07 15:55:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-03-07 15:55:40 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-03-07 15:55:39 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-03-07 15:55:38 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-03-07 15:55:38 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-03-07 15:55:37 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-03-07 15:55:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-03-07 15:55:37 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-03-07 15:55:37 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-03-07 15:55:36 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-03-07 15:55:36 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-03-07 15:55:35 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-03-07 15:55:35 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-03-07 15:55:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-03-07 15:55:35 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-03-07 15:55:35 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-03-07 15:55:35 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-03-07 15:55:34 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-03-07 15:55:34 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-03-07 15:55:32 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-03-07 15:55:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-03-07 15:55:32 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-03-07 15:55:32 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-03-07 15:55:31 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-03-07 15:55:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-03-07 15:55:31 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-03-07 15:55:31 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-03-07 15:55:30 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-03-07 15:55:30 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-03-07 15:55:30 ----A---- C:\Windows\system32\xinput1_3.dll
2013-03-07 15:55:30 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-03-07 15:55:29 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-03-07 15:55:29 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-03-07 15:55:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-03-07 15:55:29 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-03-07 15:55:29 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-03-07 15:55:29 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-03-07 15:55:28 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-03-07 15:55:28 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-03-07 15:55:28 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-03-07 15:55:28 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-03-07 15:55:27 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-03-07 15:55:27 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-03-07 15:55:27 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-03-07 15:55:27 ----A---- C:\Windows\system32\d3dx10.dll
2013-03-07 15:55:24 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-03-07 15:55:24 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-03-07 15:55:24 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-03-07 15:55:24 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-03-07 15:55:23 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-03-07 15:55:23 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-03-07 15:55:22 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-03-07 15:55:22 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-03-07 15:55:22 ----A---- C:\Windows\system32\xinput1_2.dll
2013-03-07 15:55:22 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-03-07 15:55:21 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-03-07 15:55:21 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-03-07 15:55:21 ----A---- C:\Windows\system32\xinput1_1.dll
2013-03-07 15:55:21 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-03-07 15:55:20 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-03-07 15:55:20 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-03-07 15:55:14 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-03-07 15:55:14 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-03-07 15:55:13 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-03-07 15:55:13 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-03-07 15:55:12 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-03-07 15:55:12 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-03-07 15:55:11 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-03-07 15:55:11 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-03-07 15:55:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-03-07 15:55:11 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-03-07 15:55:10 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-03-07 15:55:10 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-03-07 15:55:09 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-03-07 15:55:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-03-05 01:13:54 ----A---- C:\Windows\system32\Wdfres.dll
2013-03-05 01:13:54 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-03-05 01:13:54 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-03-05 01:05:40 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-03-05 01:05:40 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-03-05 01:05:39 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-03-05 01:05:39 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-03-05 01:05:38 ----A---- C:\Windows\system32\WUDFx.dll
2013-03-05 01:05:38 ----A---- C:\Windows\system32\WUDFHost.exe
2013-03-05 01:05:38 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-03-05 00:19:53 ----D---- C:\Program Files (x86)\dumps
2013-03-05 00:16:58 ----D---- C:\Program Files (x86)\Steam
2013-03-04 07:20:11 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-03-04 07:20:10 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-03-04 07:20:10 ----A---- C:\Windows\system32\xmllite.dll
2013-03-04 07:20:07 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-03-04 07:20:07 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-03-04 07:20:07 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-03-04 07:20:07 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-03-04 07:20:02 ----A---- C:\Windows\explorer.exe
2013-03-04 07:20:01 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-03-04 07:19:55 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-03-04 07:19:55 ----A---- C:\Windows\system32\ntshrui.dll
2013-03-04 07:19:51 ----A---- C:\Windows\system32\tquery.dll
2013-03-04 07:19:49 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-03-04 07:19:49 ----A---- C:\Windows\system32\mssrch.dll
2013-03-04 07:19:47 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-03-04 07:19:46 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-03-04 07:19:46 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-03-04 07:19:45 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\system32\mssvp.dll
2013-03-04 07:19:45 ----A---- C:\Windows\system32\mssphtb.dll
2013-03-04 07:19:45 ----A---- C:\Windows\system32\mssph.dll
2013-03-04 07:19:44 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-03-04 07:19:44 ----A---- C:\Windows\system32\msscntrs.dll
2013-03-04 07:19:43 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-03-04 07:19:43 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-03-04 07:19:40 ----A---- C:\Windows\system32\profsvc.dll
2013-03-04 07:19:38 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-03-04 07:19:35 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-03-04 07:19:35 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\nlasvc.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\netcorehc.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\ncsi.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-03-04 07:19:34 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-03-04 07:19:34 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-03-04 07:19:34 ----A---- C:\Windows\system32\nlaapi.dll
2013-03-04 07:19:34 ----A---- C:\Windows\system32\netevent.dll
2013-03-04 07:19:34 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-03-04 07:19:31 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-03-04 07:19:29 ----A---- C:\Windows\system32\usp10.dll
2013-03-04 07:19:28 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-03-04 07:19:19 ----A---- C:\Windows\system32\Wpc.dll
2013-03-04 07:19:18 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-03-04 07:19:18 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-03-04 07:19:18 ----A---- C:\Windows\system32\gameux.dll
2013-03-04 07:19:05 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-03-04 07:19:05 ----A---- C:\Windows\system32\msi.dll
2013-03-04 07:18:51 ----A---- C:\Windows\system32\KernelBase.dll
2013-03-04 07:18:49 ----A---- C:\Windows\system32\wow64win.dll
2013-03-04 07:18:49 ----A---- C:\Windows\system32\kernel32.dll
2013-03-04 07:18:49 ----A---- C:\Windows\system32\conhost.exe
2013-03-04 07:18:48 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-03-04 07:18:46 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-03-04 07:18:46 ----A---- C:\Windows\system32\ntvdm64.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-03-04 07:18:45 ----A---- C:\Windows\system32\wow64cpu.dll
2013-03-04 07:18:45 ----A---- C:\Windows\system32\wow64.dll
2013-03-04 07:18:26 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-03-04 07:18:16 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-03-04 07:18:16 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-03-04 07:18:04 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-03-04 07:18:04 ----A---- C:\Windows\system32\fsutil.exe
2013-03-04 07:18:04 ----A---- C:\Windows\system32\esent.dll
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\storport.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-03-04 07:18:03 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-03-04 07:18:03 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-03-04 07:18:03 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-03-04 07:17:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-03-04 07:17:56 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-03-04 07:17:56 ----A---- C:\Windows\system32\srcore.dll
2013-03-04 07:17:56 ----A---- C:\Windows\system32\prevhost.exe
2013-03-04 07:17:53 ----A---- C:\Windows\system32\spoolsv.exe
2013-03-04 07:17:53 ----A---- C:\Windows\splwow64.exe
2013-03-03 23:22:37 ----D---- C:\Windows\cs
2013-03-03 23:21:16 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-03-03 23:19:44 ----DC---- C:\Windows\system32\DRVSTORE
2013-03-03 23:19:44 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2013-03-03 23:19:38 ----D---- C:\Program Files\Windows Live
2013-03-03 23:19:30 ----D---- C:\Windows\PCHEALTH
2013-03-03 23:11:00 ----D---- C:\Program Files (x86)\Windows Live
2013-03-03 23:10:21 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-03-03 23:10:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-03-03 23:10:21 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-03-03 23:10:21 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-03-03 23:10:18 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-03-03 23:10:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-03-03 23:10:18 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-03-03 23:10:18 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-03-03 23:09:21 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-03-03 23:09:21 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-03-03 23:08:24 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-03-03 23:08:24 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-03-03 23:02:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-03-03 22:47:38 ----D---- C:\594478e89b51a071aff2
2013-03-03 22:47:13 ----D---- C:\Program Files (x86)\Microsoft SkyDrive
2013-03-03 22:46:44 ----D---- C:\ProgramData\Microsoft SkyDrive
2013-02-13 04:41:46 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-02-13 04:41:43 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-02-13 04:41:42 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-02-13 04:41:19 ----A---- C:\Windows\system32\win32k.sys
2013-02-13 04:41:14 ----A---- C:\Windows\system32\ieframe.dll
2013-02-13 04:41:11 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-02-13 04:41:09 ----A---- C:\Windows\system32\mshtml.dll
2013-02-13 04:41:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-02-13 04:41:03 ----A---- C:\Windows\system32\wininet.dll
2013-02-13 04:41:02 ----A---- C:\Windows\system32\iertutil.dll
2013-02-13 04:41:01 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-02-13 04:41:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-02-13 04:41:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-02-13 04:41:00 ----A---- C:\Windows\system32\msfeeds.dll
2013-02-13 04:40:59 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-02-13 04:40:59 ----A---- C:\Windows\system32\urlmon.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\url.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-02-13 04:40:57 ----A---- C:\Windows\system32\url.dll
2013-02-13 04:40:57 ----A---- C:\Windows\system32\mshtmled.dll
2013-02-13 04:40:57 ----A---- C:\Windows\system32\ieui.dll
2013-02-13 04:40:56 ----A---- C:\Windows\system32\jsproxy.dll
2013-02-13 04:40:53 ----A---- C:\Windows\system32\winsrv.dll
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-02-13 04:40:51 ----A---- C:\Windows\SYSWOW64\user.exe
2013-02-13 04:40:30 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-02-13 04:40:29 ----A---- C:\Windows\system32\drivers\netio.sys
2013-02-13 04:40:29 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-02-13 04:40:03 ----A---- C:\Windows\system32\taskhost.exe
2013-02-11 17:45:08 ----A---- C:\Windows\system32\MRT.exe
2013-02-11 17:24:42 ----D---- C:\Windows\system32\SPReview
2013-02-11 17:23:40 ----D---- C:\Windows\system32\EventProviders
2013-02-11 02:20:08 ----D---- C:\Program Files (x86)\Auto Mouse Clicker v3.4

======List of files/folders modified in the last 1 month======

2013-03-08 00:23:16 ----D---- C:\Windows\Prefetch
2013-03-08 00:23:12 ----D---- C:\Windows\Temp
2013-03-08 00:23:11 ----RD---- C:\Program Files
2013-03-07 23:44:42 ----D---- C:\Users\Owner\AppData\Roaming\TS3Client
2013-03-07 20:07:26 ----D---- C:\Users\Owner\AppData\Roaming\Skype
2013-03-07 15:56:07 ----D---- C:\Windows\System32
2013-03-07 15:56:06 ----D---- C:\Windows\SysWOW64
2013-03-07 15:55:20 ----RSD---- C:\Windows\assembly
2013-03-07 15:55:16 ----D---- C:\Windows\Microsoft.NET
2013-03-07 15:54:20 ----SHD---- C:\System Volume Information
2013-03-07 12:22:19 ----D---- C:\Windows\system32\config
2013-03-07 12:13:00 ----D---- C:\Windows\inf
2013-03-07 12:13:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-07 12:07:57 ----D---- C:\ProgramData\NVIDIA
2013-03-06 02:04:04 ----D---- C:\Windows\rescache
2013-03-05 11:37:10 ----D---- C:\Windows\winsxs
2013-03-05 11:34:02 ----D---- C:\Windows\system32\drivers
2013-03-05 11:34:01 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-05 11:34:01 ----D---- C:\Windows\system32\cs-CZ
2013-03-05 11:34:00 ----D---- C:\Windows
2013-03-05 11:33:59 ----D---- C:\Windows\system32\wbem
2013-03-05 11:33:59 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-03-05 11:33:58 ----RSD---- C:\Windows\Fonts
2013-03-05 11:33:57 ----D---- C:\Windows\PolicyDefinitions
2013-03-05 11:33:56 ----D---- C:\Windows\SYSWOW64\migration
2013-03-05 11:33:56 ----D---- C:\Windows\system32\migration
2013-03-05 11:33:50 ----D---- C:\Program Files\Internet Explorer
2013-03-05 11:33:50 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-05 11:33:49 ----D---- C:\Windows\AppPatch
2013-03-05 11:33:44 ----D---- C:\Windows\system32\DriverStore
2013-03-05 01:27:58 ----SHD---- C:\Windows\Installer
2013-03-05 01:27:53 ----D---- C:\ProgramData\Microsoft Help
2013-03-05 01:14:11 ----D---- C:\Windows\system32\catroot
2013-03-05 01:14:09 ----D---- C:\Windows\system32\catroot2
2013-03-05 00:19:53 ----RD---- C:\Program Files (x86)
2013-03-05 00:17:08 ----D---- C:\Program Files (x86)\Common Files
2013-03-04 18:21:57 ----D---- C:\Program Files\TeamSpeak 3 Client
2013-03-04 02:22:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-04 01:29:30 ----D---- C:\Program Files (x86)\Microsoft Works
2013-03-04 00:26:00 ----SD---- C:\Users\Owner\AppData\Roaming\Microsoft
2013-03-03 23:19:52 ----SD---- C:\ProgramData\Microsoft
2013-03-03 23:07:38 ----D---- C:\Windows\Logs
2013-03-03 22:50:25 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-03 22:50:25 ----D---- C:\Windows\system32\en-US
2013-03-03 22:50:23 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-03 22:48:01 ----D---- C:\Windows\SoftwareDistribution
2013-03-03 22:46:44 ----HD---- C:\ProgramData
2013-03-03 19:57:16 ----A---- C:\Windows\MSTM64_Q.INI
2013-02-24 20:50:58 ----D---- C:\Windows\system32\NDF
2013-02-12 09:05:48 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-02-12 09:05:48 ----D---- C:\Program Files (x86)\Windows Mail
2013-02-12 09:05:47 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-02-12 09:05:47 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-02-12 09:05:47 ----D---- C:\Program Files (x86)\Windows Media Player
2013-02-12 09:05:44 ----D---- C:\Program Files\Windows Sidebar
2013-02-12 09:05:44 ----D---- C:\Program Files\Windows Mail
2013-02-12 09:05:44 ----D---- C:\Program Files\DVD Maker
2013-02-12 09:05:43 ----D---- C:\Program Files\Windows Portable Devices
2013-02-12 09:05:43 ----D---- C:\Program Files\Windows Media Player
2013-02-12 09:05:42 ----D---- C:\Program Files\Windows Photo Viewer
2013-02-12 09:05:42 ----D---- C:\Program Files\Windows Journal
2013-02-12 09:05:41 ----D---- C:\Program Files\Common Files\System
2013-02-12 09:05:39 ----D---- C:\Windows\servicing
2013-02-12 09:05:39 ----D---- C:\Program Files\Windows Defender
2013-02-12 09:05:38 ----D---- C:\Windows\ehome
2013-02-12 09:05:24 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2013-02-12 09:05:24 ----D---- C:\Windows\SYSWOW64\oobe
2013-02-12 09:05:24 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-12 09:05:23 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-02-12 09:05:22 ----D---- C:\Windows\SYSWOW64\Setup
2013-02-12 09:05:22 ----D---- C:\Windows\SYSWOW64\cs
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\wbem
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\sppui
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-12 09:05:18 ----D---- C:\Windows\SYSWOW64\migwiz
2013-02-12 09:05:17 ----D---- C:\Windows\SYSWOW64\Dism
2013-02-12 09:04:41 ----D---- C:\Windows\system32\da-DK
2013-02-12 09:04:40 ----D---- C:\Windows\system32\oobe
2013-02-12 09:04:38 ----D---- C:\Windows\system32\Setup
2013-02-12 09:04:38 ----D---- C:\Windows\system32\cs
2013-02-12 09:04:38 ----D---- C:\Windows\system32\AdvancedInstallers
2013-02-12 09:04:34 ----D---- C:\Windows\system32\sppui
2013-02-12 09:04:34 ----D---- C:\Windows\system32\manifeststore
2013-02-12 09:04:34 ----D---- C:\Windows\system32\es-ES
2013-02-12 09:04:32 ----D---- C:\Windows\system32\drivers\UMDF
2013-02-12 09:04:29 ----D---- C:\Windows\system32\migwiz
2013-02-12 09:04:28 ----D---- C:\Windows\system32\Dism
2013-02-12 09:03:09 ----D---- C:\Windows\system32\Boot
2013-02-11 17:45:09 ----D---- C:\Windows\debug
2013-02-11 17:42:21 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-02-11 17:42:20 ----A---- C:\Windows\system32\msclmd.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-09-14 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-30 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-30 2472680]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-21 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-03-30 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S2 MLPTDR_Q;MLPTDR_Q; \??\C:\Windows\system32\ []
S3 ASAPIW2K;ASAPIW2K; C:\Windows\System32\Drivers\ASAPIW2K.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AsusService;Asus Launcher Service; C:\Windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-09-14 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-28 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-28 116648]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-11-19 489256]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-30 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prozkoumání PC - trhá se po přeinstalování

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

kvasak
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 28 úno 2013 22:17

Re: Prozkoumání PC - trhá se po přeinstalování

#7 Příspěvek od kvasak »

Nový log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Owner at 2013-03-08 19:39:29
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 139 GB (58%) free of 238 GB
Total RAM: 4086 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:39:54, on 8.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Owner.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\Windows\SysWOW64\AsusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8306 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 30787024
\??\C:\Windows\system32\conhost.exe "1262631669-14197064251128377685-191690167527359491123349462229542048-169251990
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\SysWOW64\AsusService.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1744
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"taskhost.exe"
taskeng.exe {120DA577-D6E4-4A5A-962F-48CD2167BA32}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Windows\System32\MSTM64_Q.EXE"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Steam\steam.exe" -silent
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3560.0.1970995143\574760501" --supports-dual-gpus=false --gpu-vendor-id=0x8086 --gpu-device-id=0xa001 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.14.10.2230 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="3560.2.714924899\1979237815" /prefetch:3
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2013Q1/1/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_82/UMA-Uniformity-Trial-10-Percent/group_03/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="3560.3.195711269\1245553527" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3560.4.1873632837\170478448" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Users\Owner\Downloads\RSITx64.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-30 11447912]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-03-30 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-03-30 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-03-30 364056]
"KONICA MINOLTA PagePro 1350WStatusDisplay"=C:\Windows\system32\MSTM64_Q.EXE [2011-03-25 247736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-01-08 18705664]
"Steam"=C:\Program Files (x86)\Steam\Steam.exe [2013-02-25 1602984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-18 946352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-03-30 261120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-03-08 19:35:36 ----D---- C:\_OTM
2013-03-08 00:23:11 ----D---- C:\Program Files\trend micro
2013-03-08 00:23:10 ----D---- C:\rsit
2013-03-07 15:56:06 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-03-07 15:56:06 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-03-07 15:56:04 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-03-07 15:56:04 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-03-07 15:56:02 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-03-07 15:56:02 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-03-07 15:56:01 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-03-07 15:56:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-03-07 15:56:01 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-03-07 15:56:01 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-03-07 15:56:01 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-03-07 15:56:00 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-03-07 15:56:00 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-03-07 15:56:00 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-03-07 15:56:00 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-03-07 15:55:59 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-03-07 15:55:59 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-03-07 15:55:59 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-03-07 15:55:59 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-03-07 15:55:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-03-07 15:55:58 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-03-07 15:55:57 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-03-07 15:55:57 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-03-07 15:55:56 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-03-07 15:55:56 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-03-07 15:55:54 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-03-07 15:55:54 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-03-07 15:55:52 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-03-07 15:55:52 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-03-07 15:55:52 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-03-07 15:55:52 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-03-07 15:55:51 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-03-07 15:55:51 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-03-07 15:55:51 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-03-07 15:55:51 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-03-07 15:55:51 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-03-07 15:55:51 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-03-07 15:55:50 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-03-07 15:55:50 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-03-07 15:55:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-03-07 15:55:50 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-03-07 15:55:50 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-03-07 15:55:50 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-03-07 15:55:49 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-03-07 15:55:49 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-03-07 15:55:47 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-03-07 15:55:46 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-03-07 15:55:46 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-03-07 15:55:46 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-03-07 15:55:46 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-03-07 15:55:46 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-03-07 15:55:46 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-03-07 15:55:45 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-03-07 15:55:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-03-07 15:55:45 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-03-07 15:55:45 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-03-07 15:55:44 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-03-07 15:55:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-03-07 15:55:44 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-03-07 15:55:44 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-03-07 15:55:44 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-03-07 15:55:44 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-03-07 15:55:43 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-03-07 15:55:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-03-07 15:55:43 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-03-07 15:55:43 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-03-07 15:55:42 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-03-07 15:55:42 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-03-07 15:55:41 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-03-07 15:55:41 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-03-07 15:55:41 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-03-07 15:55:41 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-03-07 15:55:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-03-07 15:55:40 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-03-07 15:55:39 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-03-07 15:55:39 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-03-07 15:55:38 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-03-07 15:55:38 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-03-07 15:55:37 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-03-07 15:55:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-03-07 15:55:37 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-03-07 15:55:37 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-03-07 15:55:36 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-03-07 15:55:36 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-03-07 15:55:35 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-03-07 15:55:35 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-03-07 15:55:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-03-07 15:55:35 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-03-07 15:55:35 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-03-07 15:55:35 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-03-07 15:55:34 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-03-07 15:55:34 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-03-07 15:55:32 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-03-07 15:55:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-03-07 15:55:32 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-03-07 15:55:32 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-03-07 15:55:31 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-03-07 15:55:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-03-07 15:55:31 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-03-07 15:55:31 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-03-07 15:55:30 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-03-07 15:55:30 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-03-07 15:55:30 ----A---- C:\Windows\system32\xinput1_3.dll
2013-03-07 15:55:30 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-03-07 15:55:29 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-03-07 15:55:29 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-03-07 15:55:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-03-07 15:55:29 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-03-07 15:55:29 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-03-07 15:55:29 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-03-07 15:55:28 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-03-07 15:55:28 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-03-07 15:55:28 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-03-07 15:55:28 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-03-07 15:55:27 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-03-07 15:55:27 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-03-07 15:55:27 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-03-07 15:55:27 ----A---- C:\Windows\system32\d3dx10.dll
2013-03-07 15:55:24 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-03-07 15:55:24 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-03-07 15:55:24 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-03-07 15:55:24 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-03-07 15:55:23 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-03-07 15:55:23 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-03-07 15:55:22 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-03-07 15:55:22 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-03-07 15:55:22 ----A---- C:\Windows\system32\xinput1_2.dll
2013-03-07 15:55:22 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-03-07 15:55:21 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-03-07 15:55:21 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-03-07 15:55:21 ----A---- C:\Windows\system32\xinput1_1.dll
2013-03-07 15:55:21 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-03-07 15:55:20 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-03-07 15:55:20 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-03-07 15:55:14 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-03-07 15:55:14 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-03-07 15:55:13 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-03-07 15:55:13 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-03-07 15:55:13 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-03-07 15:55:12 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-03-07 15:55:12 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-03-07 15:55:11 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-03-07 15:55:11 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-03-07 15:55:11 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-03-07 15:55:11 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-03-07 15:55:10 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-03-07 15:55:10 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-03-07 15:55:09 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-03-07 15:55:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-03-05 01:13:54 ----A---- C:\Windows\system32\Wdfres.dll
2013-03-05 01:13:54 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-03-05 01:13:54 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-03-05 01:05:40 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-03-05 01:05:40 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-03-05 01:05:39 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-03-05 01:05:39 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-03-05 01:05:38 ----A---- C:\Windows\system32\WUDFx.dll
2013-03-05 01:05:38 ----A---- C:\Windows\system32\WUDFHost.exe
2013-03-05 01:05:38 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-03-05 00:19:53 ----D---- C:\Program Files (x86)\dumps
2013-03-05 00:16:58 ----D---- C:\Program Files (x86)\Steam
2013-03-04 07:20:11 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-03-04 07:20:10 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-03-04 07:20:10 ----A---- C:\Windows\system32\xmllite.dll
2013-03-04 07:20:07 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-03-04 07:20:07 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-03-04 07:20:07 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-03-04 07:20:07 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-03-04 07:20:02 ----A---- C:\Windows\explorer.exe
2013-03-04 07:20:01 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-03-04 07:19:55 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-03-04 07:19:55 ----A---- C:\Windows\system32\ntshrui.dll
2013-03-04 07:19:51 ----A---- C:\Windows\system32\tquery.dll
2013-03-04 07:19:49 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-03-04 07:19:49 ----A---- C:\Windows\system32\mssrch.dll
2013-03-04 07:19:47 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-03-04 07:19:46 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-03-04 07:19:46 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-03-04 07:19:45 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-03-04 07:19:45 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-03-04 07:19:45 ----A---- C:\Windows\system32\mssvp.dll
2013-03-04 07:19:45 ----A---- C:\Windows\system32\mssphtb.dll
2013-03-04 07:19:45 ----A---- C:\Windows\system32\mssph.dll
2013-03-04 07:19:44 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-03-04 07:19:44 ----A---- C:\Windows\system32\msscntrs.dll
2013-03-04 07:19:43 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-03-04 07:19:43 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-03-04 07:19:40 ----A---- C:\Windows\system32\profsvc.dll
2013-03-04 07:19:38 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-03-04 07:19:35 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-03-04 07:19:35 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\nlasvc.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\netcorehc.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\ncsi.dll
2013-03-04 07:19:35 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-03-04 07:19:34 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-03-04 07:19:34 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-03-04 07:19:34 ----A---- C:\Windows\system32\nlaapi.dll
2013-03-04 07:19:34 ----A---- C:\Windows\system32\netevent.dll
2013-03-04 07:19:34 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-03-04 07:19:31 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-03-04 07:19:29 ----A---- C:\Windows\system32\usp10.dll
2013-03-04 07:19:28 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-03-04 07:19:19 ----A---- C:\Windows\system32\Wpc.dll
2013-03-04 07:19:18 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-03-04 07:19:18 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-03-04 07:19:18 ----A---- C:\Windows\system32\gameux.dll
2013-03-04 07:19:05 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-03-04 07:19:05 ----A---- C:\Windows\system32\msi.dll
2013-03-04 07:18:51 ----A---- C:\Windows\system32\KernelBase.dll
2013-03-04 07:18:49 ----A---- C:\Windows\system32\wow64win.dll
2013-03-04 07:18:49 ----A---- C:\Windows\system32\kernel32.dll
2013-03-04 07:18:49 ----A---- C:\Windows\system32\conhost.exe
2013-03-04 07:18:48 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-03-04 07:18:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-03-04 07:18:46 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-03-04 07:18:46 ----A---- C:\Windows\system32\ntvdm64.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-03-04 07:18:45 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-03-04 07:18:45 ----A---- C:\Windows\system32\wow64cpu.dll
2013-03-04 07:18:45 ----A---- C:\Windows\system32\wow64.dll
2013-03-04 07:18:26 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-03-04 07:18:16 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-03-04 07:18:16 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-03-04 07:18:15 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-03-04 07:18:04 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-03-04 07:18:04 ----A---- C:\Windows\system32\fsutil.exe
2013-03-04 07:18:04 ----A---- C:\Windows\system32\esent.dll
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\storport.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-03-04 07:18:04 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-03-04 07:18:03 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-03-04 07:18:03 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-03-04 07:18:03 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-03-04 07:17:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-03-04 07:17:56 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-03-04 07:17:56 ----A---- C:\Windows\system32\srcore.dll
2013-03-04 07:17:56 ----A---- C:\Windows\system32\prevhost.exe
2013-03-04 07:17:53 ----A---- C:\Windows\system32\spoolsv.exe
2013-03-04 07:17:53 ----A---- C:\Windows\splwow64.exe
2013-03-03 23:22:37 ----D---- C:\Windows\cs
2013-03-03 23:21:16 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-03-03 23:19:44 ----DC---- C:\Windows\system32\DRVSTORE
2013-03-03 23:19:44 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2013-03-03 23:19:38 ----D---- C:\Program Files\Windows Live
2013-03-03 23:19:30 ----D---- C:\Windows\PCHEALTH
2013-03-03 23:11:00 ----D---- C:\Program Files (x86)\Windows Live
2013-03-03 23:10:21 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-03-03 23:10:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-03-03 23:10:21 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-03-03 23:10:21 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-03-03 23:10:18 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-03-03 23:10:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-03-03 23:10:18 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-03-03 23:10:18 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-03-03 23:09:21 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-03-03 23:09:21 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-03-03 23:08:24 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-03-03 23:08:24 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-03-03 23:02:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-03-03 22:47:38 ----D---- C:\594478e89b51a071aff2
2013-03-03 22:47:13 ----D---- C:\Program Files (x86)\Microsoft SkyDrive
2013-03-03 22:46:44 ----D---- C:\ProgramData\Microsoft SkyDrive
2013-02-13 04:41:46 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-02-13 04:41:43 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-02-13 04:41:42 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-02-13 04:41:19 ----A---- C:\Windows\system32\win32k.sys
2013-02-13 04:41:14 ----A---- C:\Windows\system32\ieframe.dll
2013-02-13 04:41:11 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-02-13 04:41:09 ----A---- C:\Windows\system32\mshtml.dll
2013-02-13 04:41:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-02-13 04:41:03 ----A---- C:\Windows\system32\wininet.dll
2013-02-13 04:41:02 ----A---- C:\Windows\system32\iertutil.dll
2013-02-13 04:41:01 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-02-13 04:41:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-02-13 04:41:00 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-02-13 04:41:00 ----A---- C:\Windows\system32\msfeeds.dll
2013-02-13 04:40:59 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-02-13 04:40:59 ----A---- C:\Windows\system32\urlmon.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\url.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-02-13 04:40:57 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-02-13 04:40:57 ----A---- C:\Windows\system32\url.dll
2013-02-13 04:40:57 ----A---- C:\Windows\system32\mshtmled.dll
2013-02-13 04:40:57 ----A---- C:\Windows\system32\ieui.dll
2013-02-13 04:40:56 ----A---- C:\Windows\system32\jsproxy.dll
2013-02-13 04:40:53 ----A---- C:\Windows\system32\winsrv.dll
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-02-13 04:40:52 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-02-13 04:40:51 ----A---- C:\Windows\SYSWOW64\user.exe
2013-02-13 04:40:30 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-02-13 04:40:29 ----A---- C:\Windows\system32\drivers\netio.sys
2013-02-13 04:40:29 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-02-13 04:40:03 ----A---- C:\Windows\system32\taskhost.exe
2013-02-11 17:45:08 ----A---- C:\Windows\system32\MRT.exe
2013-02-11 17:24:42 ----D---- C:\Windows\system32\SPReview
2013-02-11 17:23:40 ----D---- C:\Windows\system32\EventProviders
2013-02-11 02:20:08 ----D---- C:\Program Files (x86)\Auto Mouse Clicker v3.4

======List of files/folders modified in the last 1 month======

2013-03-08 19:39:06 ----D---- C:\Users\Owner\AppData\Roaming\Skype
2013-03-08 19:38:12 ----D---- C:\Windows\Temp
2013-03-08 19:37:23 ----D---- C:\ProgramData\NVIDIA
2013-03-08 19:35:37 ----D---- C:\Windows\Tasks
2013-03-08 19:35:29 ----D---- C:\Windows\Prefetch
2013-03-08 12:55:15 ----D---- C:\Windows\system32\config
2013-03-08 11:03:44 ----D---- C:\Users\Owner\AppData\Roaming\TS3Client
2013-03-08 00:50:28 ----D---- C:\Windows\System32
2013-03-08 00:50:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-03-08 00:50:27 ----D---- C:\Windows\inf
2013-03-08 00:23:11 ----RD---- C:\Program Files
2013-03-07 20:37:13 ----SHD---- C:\System Volume Information
2013-03-07 15:56:06 ----D---- C:\Windows\SysWOW64
2013-03-07 15:55:20 ----RSD---- C:\Windows\assembly
2013-03-07 15:55:16 ----D---- C:\Windows\Microsoft.NET
2013-03-06 02:04:04 ----D---- C:\Windows\rescache
2013-03-05 11:37:10 ----D---- C:\Windows\winsxs
2013-03-05 11:34:02 ----D---- C:\Windows\system32\drivers
2013-03-05 11:34:01 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-03-05 11:34:01 ----D---- C:\Windows\system32\cs-CZ
2013-03-05 11:34:00 ----D---- C:\Windows
2013-03-05 11:33:59 ----D---- C:\Windows\system32\wbem
2013-03-05 11:33:59 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-03-05 11:33:58 ----RSD---- C:\Windows\Fonts
2013-03-05 11:33:57 ----D---- C:\Windows\PolicyDefinitions
2013-03-05 11:33:56 ----D---- C:\Windows\SYSWOW64\migration
2013-03-05 11:33:56 ----D---- C:\Windows\system32\migration
2013-03-05 11:33:50 ----D---- C:\Program Files\Internet Explorer
2013-03-05 11:33:50 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-05 11:33:49 ----D---- C:\Windows\AppPatch
2013-03-05 11:33:44 ----D---- C:\Windows\system32\DriverStore
2013-03-05 01:27:58 ----SHD---- C:\Windows\Installer
2013-03-05 01:27:53 ----D---- C:\ProgramData\Microsoft Help
2013-03-05 01:14:11 ----D---- C:\Windows\system32\catroot
2013-03-05 01:14:09 ----D---- C:\Windows\system32\catroot2
2013-03-05 00:19:53 ----RD---- C:\Program Files (x86)
2013-03-05 00:17:08 ----D---- C:\Program Files (x86)\Common Files
2013-03-04 18:21:57 ----D---- C:\Program Files\TeamSpeak 3 Client
2013-03-04 02:22:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-04 01:29:30 ----D---- C:\Program Files (x86)\Microsoft Works
2013-03-04 00:26:00 ----SD---- C:\Users\Owner\AppData\Roaming\Microsoft
2013-03-03 23:19:52 ----SD---- C:\ProgramData\Microsoft
2013-03-03 23:07:38 ----D---- C:\Windows\Logs
2013-03-03 22:50:25 ----D---- C:\Windows\SYSWOW64\en-US
2013-03-03 22:50:25 ----D---- C:\Windows\system32\en-US
2013-03-03 22:50:23 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-03 22:48:01 ----D---- C:\Windows\SoftwareDistribution
2013-03-03 22:46:44 ----HD---- C:\ProgramData
2013-03-03 19:57:16 ----A---- C:\Windows\MSTM64_Q.INI
2013-02-24 20:50:58 ----D---- C:\Windows\system32\NDF
2013-02-12 09:05:48 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-02-12 09:05:48 ----D---- C:\Program Files (x86)\Windows Mail
2013-02-12 09:05:47 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-02-12 09:05:47 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-02-12 09:05:47 ----D---- C:\Program Files (x86)\Windows Media Player
2013-02-12 09:05:44 ----D---- C:\Program Files\Windows Sidebar
2013-02-12 09:05:44 ----D---- C:\Program Files\Windows Mail
2013-02-12 09:05:44 ----D---- C:\Program Files\DVD Maker
2013-02-12 09:05:43 ----D---- C:\Program Files\Windows Portable Devices
2013-02-12 09:05:43 ----D---- C:\Program Files\Windows Media Player
2013-02-12 09:05:42 ----D---- C:\Program Files\Windows Photo Viewer
2013-02-12 09:05:42 ----D---- C:\Program Files\Windows Journal
2013-02-12 09:05:41 ----D---- C:\Program Files\Common Files\System
2013-02-12 09:05:39 ----D---- C:\Windows\servicing
2013-02-12 09:05:39 ----D---- C:\Program Files\Windows Defender
2013-02-12 09:05:38 ----D---- C:\Windows\ehome
2013-02-12 09:05:24 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2013-02-12 09:05:24 ----D---- C:\Windows\SYSWOW64\oobe
2013-02-12 09:05:24 ----D---- C:\Windows\SYSWOW64\da-DK
2013-02-12 09:05:23 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-02-12 09:05:22 ----D---- C:\Windows\SYSWOW64\Setup
2013-02-12 09:05:22 ----D---- C:\Windows\SYSWOW64\cs
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\wbem
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\sppui
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-02-12 09:05:19 ----D---- C:\Windows\SYSWOW64\es-ES
2013-02-12 09:05:18 ----D---- C:\Windows\SYSWOW64\migwiz
2013-02-12 09:05:17 ----D---- C:\Windows\SYSWOW64\Dism
2013-02-12 09:04:41 ----D---- C:\Windows\system32\da-DK
2013-02-12 09:04:40 ----D---- C:\Windows\system32\oobe
2013-02-12 09:04:38 ----D---- C:\Windows\system32\Setup
2013-02-12 09:04:38 ----D---- C:\Windows\system32\cs
2013-02-12 09:04:38 ----D---- C:\Windows\system32\AdvancedInstallers
2013-02-12 09:04:34 ----D---- C:\Windows\system32\sppui
2013-02-12 09:04:34 ----D---- C:\Windows\system32\manifeststore
2013-02-12 09:04:34 ----D---- C:\Windows\system32\es-ES
2013-02-12 09:04:32 ----D---- C:\Windows\system32\drivers\UMDF
2013-02-12 09:04:29 ----D---- C:\Windows\system32\migwiz
2013-02-12 09:04:28 ----D---- C:\Windows\system32\Dism
2013-02-12 09:03:09 ----D---- C:\Windows\system32\Boot
2013-02-11 17:45:09 ----D---- C:\Windows\debug
2013-02-11 17:42:21 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-02-11 17:42:20 ----A---- C:\Windows\system32\msclmd.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-09-14 25960]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-03-30 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-30 2472680]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-21 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-03-30 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S2 MLPTDR_Q;MLPTDR_Q; \??\C:\Windows\system32\ []
S3 ASAPIW2K;ASAPIW2K; C:\Windows\System32\Drivers\ASAPIW2K.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 57856]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AsusService;Asus Launcher Service; C:\Windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-28 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-09-14 2009704]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-28 116648]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-11-19 489256]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-30 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prozkoumání PC - trhá se po přeinstalování

#8 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

kvasak
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 28 úno 2013 22:17

Re: Prozkoumání PC - trhá se po přeinstalování

#9 Příspěvek od kvasak »

Web jede v pohodě, 3gp jsem ještě nezkoušel, musím počkat až mi šéfová pošle z terénu videa (není schopná to hodit na kameru).

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prozkoumání PC - trhá se po přeinstalování

#10 Příspěvek od Rudy »

OK. Případně se ozvěte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

kvasak
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 28 úno 2013 22:17

Re: Prozkoumání PC - trhá se po přeinstalování

#11 Příspěvek od kvasak »

Vše jede v pořádku, děkuji. Omlouvám se, že tak pozdě ujišťuji, zapomněl jsem.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119495
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prozkoumání PC - trhá se po přeinstalování

#12 Příspěvek od Rudy »

Nic se neděje. :) Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno